$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: yia34Y6wCVrh2a9LL9RbPoE3iEmzDLT7aI/c2NCvSsY= Subject key identifier: 60:6D:FC:F9:5E:19:8A:BA:86:DE:5D:09:DB:3D:D6:7C:A5:41:0F:DD Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 24F6EAB4F2D9A7C4455E02740B7E707B6ADDF388 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: 8E Signing time: Fri 28 Aug 2026 06:47:40 +0000 Manifest this update: Fri 28 Aug 2026 06:42:40 +0000 Manifest next update: Mon 31 Aug 2026 17:32:40 +0000 Files and hashes: 1: 312e322e342e302f32342d3234203d3e203234343039.roa (hash: nEQtgygHVMKG47GK6dkWFFlZukvt0PGUFnlFtUuFZLY=) 2: 312e322e342e302f32342d3234203d3e203234313531.roa (hash: TBnC2LzR+6Db4WOI7E+8pudN/0AB0HhXouySfw2xuiY=) 3: 312e322e342e302f32342d3234203d3e203234343036.roa (hash: KD/NrLapMHgxn13A+QpsSLP1PaMms/ejw9WH8KFaBPw=) 4: 3231302e322e342e302f32342d3234203d3e203234343036.roa (hash: qjoClNpkbt3zYEqhMRs326WInKPPRu2HOCo+e/Vnr/Y=) 5: 323030313a6463373a613a3a2f34382d3438203d3e203234343036.roa (hash: MHF1orAgbSzr2lYpuf4TyJeKpdLdg/LCD5tzMXxVZ6E=) 6: 3231302e322e342e302f32342d3234203d3e203234343039.roa (hash: dsVTcMJyEhqmVODGZAIkGc623cScIW3ZMfG651m2w+c=) 7: 323030313a6463373a623a3a2f34382d3438203d3e203234343039.roa (hash: /6Mi1zeF4ltbdKY1eXD8hfkFp0KVXJkt8j+oPAfEWj4=) 8: 3231302e322e342e302f32342d3234203d3e203234313531.roa (hash: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c=) 9: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (hash: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs=) 10: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: V2VG1C3N5HysUIwMZ4WJZ+V7bNTbtjJhabrnghDe9zQ=) 11: 323030313a6463373a623a3a2f34382d3438203d3e203234313531.roa (hash: nCmmLKf7p/+gDBZjpiG7vY0+piKta/7HzgAV8Daoohw=) 12: 323030313a6463373a613a3a2f34382d3438203d3e203234343039.roa (hash: K5pwkGtEJxxlEpm+SnWFmuwZM/pNsVo7v2tNZ2nf31Y=) 13: 323030313a6463373a623a3a2f34382d3438203d3e203234343036.roa (hash: fgOR+MnNJ2W83GiWVYv+7j0t8104WBZvMhJOCqCXPDU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f6:ea:b4:f2:d9:a7:c4:45:5e:02:74:0b:7e:70:7b:6a:dd:f3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Aug 28 06:42:40 2026 GMT Not After : Aug 31 17:32:40 2026 GMT Subject: CN=606DFCF95E198ABA86DE5D09DB3DD67CA5410FDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:95:61:71:8c:03:0e:e1:15:e0:45:3a:36: 82:5b:aa:12:01:c5:1a:86:70:24:8b:1c:02:82:9b: 2a:cd:6b:43:82:6a:db:ec:69:13:b8:fa:8c:f5:62: 9e:79:7a:28:87:2b:88:c4:36:87:97:75:dc:b9:b1: 25:fe:86:52:a0:19:c4:29:41:14:83:bf:70:14:9b: 97:da:d9:42:ad:63:a7:5c:fd:f8:c8:42:81:95:1a: b0:79:07:2d:60:a8:b8:05:bb:58:e1:e3:e0:59:7a: 28:91:eb:5e:a4:85:34:89:e1:1e:3d:f6:d8:98:66: de:b6:24:26:87:15:72:81:8c:27:b3:6c:24:3a:9f: 8a:ff:c2:9d:66:22:ff:d7:3c:30:e1:13:63:be:55: 6f:20:26:ab:e6:d1:23:c6:69:94:09:65:15:e9:6e: 92:04:31:b4:0f:8c:b5:71:cb:31:35:9e:f8:af:38: 21:26:70:a0:4c:b3:19:5c:ff:e3:61:cc:98:df:ec: cc:16:c9:94:23:0e:7b:d2:8f:4c:ed:8c:a1:7b:8b: f2:76:b2:ee:9e:85:01:2f:fe:f2:87:9b:2b:69:a1: 93:93:8f:ae:4f:ab:66:50:03:f2:4b:5b:1f:69:b1: cb:d2:28:5a:dd:5b:eb:b6:dd:d4:d4:49:2c:85:27: d0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:FC:F9:5E:19:8A:BA:86:DE:5D:09:DB:3D:D6:7C:A5:41:0F:DD X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:39:24:a8:fc:85:ec:6b:b9:89:0c:a1:6e:4a:65:1e:00:dc: 79:fa:fc:99:97:c1:ec:a5:47:dc:c9:03:2a:9a:7c:c9:7b:06: 62:21:00:5a:a5:98:8b:92:64:58:26:d1:86:b0:15:f3:d7:cc: 88:35:2a:a5:ab:d3:6f:9b:66:d9:b3:2b:7c:64:25:c7:fe:20: 6f:42:87:f7:bb:34:94:38:0e:48:a4:58:5a:bb:ab:37:39:c8: c7:f4:5b:0d:3a:3f:4d:a3:ad:d2:f8:39:59:9e:33:7c:6e:49: c5:99:b7:fa:6d:e3:31:94:64:63:e8:24:69:c7:7e:96:17:e6: 3a:8c:b7:ac:af:1d:62:13:0f:b3:46:67:10:ed:61:24:05:1c: 35:c2:7b:19:24:04:bd:f8:e0:55:84:f3:df:0b:c7:c2:0f:8b: 92:c2:c2:fd:5e:8b:a9:c5:bc:89:d7:f0:7c:70:cf:6d:1a:5f: c3:fe:fa:8a:4a:30:13:f4:b0:ce:93:53:a3:e4:90:61:57:c4: da:81:18:76:90:56:24:f5:c4:65:41:b3:fd:ad:e3:99:35:fd: f0:44:89:65:7b:7f:f6:c8:7f:34:00:58:70:e5:88:6f:a6:e4: af:db:b1:30:2d:50:c0:bc:8d:57:cf:7f:9a:36:9a:3f:7d:60: f0:45:94:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJPbqtPLZp8RFXgJ0C35we2rd84gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA4MjgwNjQyNDBaFw0yNjA4MzExNzMyNDBaMDMxMTAvBgNV BAMTKDYwNkRGQ0Y5NUUxOThBQkE4NkRFNUQwOURCM0RENjdDQTU0MTBGREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCki5VhcYwDDuEV4EU6NoJbqhIB xRqGcCSLHAKCmyrNa0OCatvsaRO4+oz1Yp55eiiHK4jENoeXddy5sSX+hlKgGcQp QRSDv3AUm5fa2UKtY6dc/fjIQoGVGrB5By1gqLgFu1jh4+BZeiiR616khTSJ4R49 9tiYZt62JCaHFXKBjCezbCQ6n4r/wp1mIv/XPDDhE2O+VW8gJqvm0SPGaZQJZRXp bpIEMbQPjLVxyzE1nvivOCEmcKBMsxlc/+NhzJjf7MwWyZQjDnvSj0ztjKF7i/J2 su6ehQEv/vKHmytpoZOTj65Pq2ZQA/JLWx9pscvSKFrdW+u23dTUSSyFJ9CLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYG38+V4ZirqG3l0J2z3WfKVBD90wHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjkkqPyF7Gu5 iQyhbkplHgDcefr8mZfB7KVH3MkDKpp8yXsGYiEAWqWYi5JkWCbRhrAV89fMiDUq pavTb5tm2bMrfGQlx/4gb0KH97s0lDgOSKRYWrurNznIx/RbDTo/TaOt0vg5WZ4z fG5JxZm3+m3jMZRkY+gkacd+lhfmOoy3rK8dYhMPs0ZnEO1hJAUcNcJ7GSQEvfjg VYTz3wvHwg+LksLC/V6LqcW8idfwfHDPbRpfw/76ikowE/SwzpNTo+SQYVfE2oEY dpBWJPXEZUGz/a3jmTX98ESJZXt/9sh/NABYcOWIb6bkr9uxMC1QwLyNV89/mjaa P31g8EWUsA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:54 2026 by rpki-client